Teenagers Plead Guilty to £39M Cyber Attack on Transport for London
Article Content
- •Jubair and Flowers admitted to a £39 million cyber attack on TfL, affecting 10 million customers.
- •The attack disrupted key services, including live Tube information and payment systems.
- •Both hackers are linked to the Scattered Spider group and face sentencing on July 15, 2026.
Thalha Jubair, 20, and Owen Flowers, 18, have pleaded guilty to a cyber attack on Transport for London (TfL) that occurred between August 29 and September 6, 2024. The attack, attributed to the Scattered Spider hacking group, caused an estimated £39 million in damages and disrupted services for approximately 10 million customers. Key features of the TfL Go app and website were compromised, preventing users from accessing live Tube information and making payments. The attack forced all 28,000 TfL employees to reset their passwords and impacted customer refund systems. Flowers also admitted to hacking two US healthcare companies. Both individuals are set to be sentenced on July 15, 2026.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (120)
Following this threat?
Track Lockbit, Scattered Spider and Oyster in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
China-Linked QTFY Group Targets Critical Infrastructure with Advanced Exploits The Joint Cybersecurity Advisory JCSA-20260826-01, released on August 26, 2026, details ongoing activities by the China-linked hacking group QTFY, attributed to Nanjing Xinjiuwei Network Technology Co. Active since 2018, QTFY employs platforms like QScan and QTRouter to exploit vulnerabilities in critical… 
Iranian State Actors Deploy CHOSEN BRICK Spyware Against Dissidents On September 15, 2026, the UK, US, and Netherlands issued a joint advisory regarding a spyware campaign attributed to Iranian state actors targeting dissidents, activists, and journalists. The malware, known as CHOSEN BRICK, is delivered through spear-phishing attacks on messaging platforms like WhatsApp and Telegram.…